cpa-codex-manager-openai-pool

SUSPICIOUS. The skill’s footprint is coherent with mass account-pool automation, but that purpose itself is high-risk: it stores passwords/tokens, uploads them to external CPA infrastructure, and explicitly supports stealth/rate-limit bypass. Installation trust is weakened by a publisher/source mismatch and mutable raw GitHub Docker setup, so this is not confirmed malware but is a high-risk skill.